| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-20294 | 7.5 | An issue was found in CMSWing project version 1.3.8. Because the log function does not check the log parameter, malicious parameters can execute arbitrary commands. | 2021-02-02 15:54:00 | 2021-02-01 18:15:00 |
| CVE-2020-21179 | 7.5 | Sql injection vulnerability in koa2-blog 1.0.0 allows remote attackers to Injecting a malicious SQL statement via the name parameter to the signin page. | 2021-02-02 15:53:00 | 2021-02-01 18:15:00 |
| CVE-2020-35217 | 6.8 | Vert.x-Web framework v4.0 milestone 1-4 does not perform a correct CSRF verification. Instead of comparing the CSRF token in the request with the CSRF token in the cookie, it compares the CSRF token in the cookie against a CSRF token that is stored i | 2021-02-02 15:50:00 | 2021-01-20 13:15:00 |
| CVE-2021-3164 | 6.5 | ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file via a POST request to resources.php. | 2021-02-02 15:29:00 | 2021-01-26 18:16:00 |
| CVE-2020-26278 | 7.9 | Weave Net is open source software which creates a virtual network that connects Docker containers across multiple hosts and enables their automatic discovery. Weave Net before version 2.8.0 has a vulnerability in which can allow an attacker to take o | 2021-02-02 15:26:00 | 2021-01-20 22:15:00 |
| CVE-2021-3309 | 6.8 | packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification Authority trust store, | 2021-02-02 15:20:00 | 2021-01-26 21:15:00 |
| CVE-2021-22873 | 5.8 | Revive Adserver before 5.1.0 is vulnerable to open redirects via the `dest`, `oadest`, and/or `ct0` parameters of the lg.php and ck.php delivery scripts. Such open redirects had previously been available by design to allow third party ad servers to t | 2021-02-02 15:09:00 | 2021-01-26 18:16:00 |
| CVE-2020-23359 | 7.5 | WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check. | 2021-02-02 15:00:00 | 2021-01-27 16:15:00 |
| CVE-2020-28487 | 6.0 | This affects the package vis-timeline before 7.4.4. An attacker with the ability to control the items of a Timeline element can inject additional script code into the generated application. | 2021-02-02 14:58:00 | 2021-01-22 18:15:00 |
| CVE-2020-23360 | 7.5 | oscommerce v2.3.4.1 has a functional problem in user registration and password rechecking, where a non-identical password can bypass the checks in /catalog/admin/administrators.php and /catalog/password_reset.php | 2021-02-02 14:53:00 | 2021-01-27 16:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: